DeviceCredential.dll

  • File Path: C:\Windows\system32\DeviceCredential.dll
  • Description: Microsoft Companion Authenticator Client

Hashes

Type Hash
MD5 7130EFF0337EBE01780E4319C461A719
SHA1 A1917D5DAD5112B326654637DD928091D5003FCB
SHA256 0D8B026F860F1F997381E0F635AC621113EF29D7B0FDA04A61086F7DC2FE928B
SHA384 D3124979DE766FADC3190F4B600591B4D7FB06BAC9FFBDA2495C5FE9EA62F19E9CA0E51BABD1560602AFEA5DF4752611
SHA512 E80F86DE2B0B415066F49754BD2F6358668E5E5288C01CC51100FADBA3409832868DF84F903327D195AFB4338A642E5122540DF6E5F54782AC2D5DB9A72FF3E1
SSDEEP 1536:F8KK6tpjNvgBJioy3O5GzlcarR1TwZkNfag:yYpNvgv488lca/TukNyg
IMP 2FAEEA8DEC5A1306CE99254E1363B448
PESHA1 488003E4F9C44496F007E7940F85D955E68B588F
PE256 ECF7593F6EE69B051DD7200E39DC012909F333099120991661090C5DF5DD96BC

DLL Exports:

Function Name Ordinal Type
DeviceCredentialMgrUnprotectData 21 Exported Function
DeviceCredentialMgrUpdateAuthenticationStage 22 Exported Function
DeviceCredentialRegisterPresenceMonitoring 23 Exported Function
DeviceCredentialMgrProtectData 20 Exported Function
DeviceCredentialMgrCheckProvisionedDevice 17 Exported Function
DeviceCredentialMgrGetAuthenticationData 18 Exported Function
DeviceCredentialMgrHasLogonSession 19 Exported Function
DeviceCredentialRegisterPresenceMonitoringOnExistingDevice 24 Exported Function
DeviceCredentialUnregisterPresenceMonitoring 29 Exported Function
DeviceCredentialUpdateDeploymentData 30 Exported Function
DeviceCredentialUpdatePresenceState 31 Exported Function
DeviceCredentialShowNotificationMessage 28 Exported Function
DeviceCredentialScanDeploymentData 25 Exported Function
DeviceCredentialSetFriendlyName 26 Exported Function
DeviceCredentialSetOpaqueBlob 27 Exported Function
DeviceCredentialMgrCheckPresence 16 Exported Function
DeviceCredentialDeprovision 5 Exported Function
DeviceCredentialFindClose 6 Exported Function
DeviceCredentialFindFirst 7 Exported Function
DeviceCredentialCompleteProvisioning 4 Exported Function
DeviceCredentialAbortAuthentication 1 Exported Function
DeviceCredentialAbortProvisioning 2 Exported Function
DeviceCredentialCompleteAuthentication 3 Exported Function
DeviceCredentialFindNext 8 Exported Function
DeviceCredentialInitializeProvisioning 13 Exported Function
DeviceCredentialMgrBeginAuthentication 14 Exported Function
DeviceCredentialMgrCheckIfUserSessionIsRequired 15 Exported Function
DeviceCredentialInitializeAuthentication 12 Exported Function
DeviceCredentialFreeBuffer 9 Exported Function
DeviceCredentialGetAuthStageData 10 Exported Function
DeviceCredentialGetDeviceInfo 11 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DeviceCredential.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/0d8b026f860f1f997381e0f635ac621113ef29d7b0fda04a61086f7dc2fe928b/detection/

MIT License. Copyright (c) 2020-2021 Strontic.